Audit Logs
Audit Logs provide immutable, fine-grained event records of every API call routed through Taimoe Enterprise AI Gateway and every administrative configuration change made in the console.
Under GOVERNANCE → Audit Logs in the Aegis Console, security teams and system administrators can perform log inspection, compliance audits, and security forensics.
Audit Logs Viewer Features
The Audit Logs Viewer provides visualization and filtering tools to analyze high-volume log streams efficiently.
Histogram
The bar chart at the top of the viewer provides a visual timeline of event activity:
- X-Axis: Time series.
- Y-Axis: Event count.
- Severity Color Layering: Bars are color-coded by severity level. Errors (4xx/5xx HTTP codes) and critical security events (such as key revocation, policy modification, or guardrail blocks) are highlighted in red or dark orange at the peak of each bar, making traffic anomalies visible at a glance.
Filtering & Full-text Search
- Time range: Select preset or custom query windows (e.g., "Last 15 minutes", "Last 1 hour", "Last 7 days").
- Status class: Filter by HTTP status class (
2xxsuccess,4xxclient/key errors or rate limits,5xxserver errors). - Severity: Filter by event severity level (
INFO,NOTICE,WARNING,ERROR,CRITICAL). - Search: Perform full-text search across log payloads using
request_id,virtual_key_id, actor email, model alias, or error messages.
Log Entry Schema
The log table summarizes key fields for each recorded event:
| Field | Description |
|---|---|
| SEVERITY | Event severity level used to assess risk. |
| TIMESTAMP | Exact event timestamp. |
| ACTOR | Identity triggering the action. Admin actions show user emails; API calls show Key:Alias. |
| ACTION | Administrative action performed (e.g., UPDATE_POLICY, ROTATE_KEY) or API endpoint path (/v1/chat/completions). |
| PROJECT/MODEL | Target project environment and model alias. |
| STATUS | HTTP response status code or execution result status. |
| LATENCY | Total round-trip execution latency in milliseconds. |
Inspecting Log Details & Data Protection
Clicking any log row opens a detail drawer containing complete context:
- Event Metadata: Displays tracing IDs (
request_id,project_id,virtual_key_id,team_id). - Error Details: If an error occurred, specific error codes and messages are shown (e.g.,
RateLimitExceeded,GuardrailViolation). - Payload (JSON): Full raw JSON request and response payloads.
- PII Redaction: When PII masking is enabled, sensitive values (such as national identity numbers or credit card numbers) are automatically redacted as
[REDACTED]. - Copy Full Log: Click "Copy full log" to copy the unformatted JSON object for offline analysis.
Event Severity Levels
- INFO: Standard operational events and successful API routing logs.
- NOTICE: Key system events (e.g., admin login, project creation, key issuance).
- WARNING: Potential issue warnings (e.g., key or team usage approaching quota limits).
- ERROR: Clear error events (e.g., API request failures, invalid Virtual Keys, model provider error responses).
- CRITICAL: High-risk security events (e.g., detected malicious prompt injection attempts, guardrail policy violations, or excessive 401 authentication failures).